Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750854da-6a6d-4f9f-a9f0-b7000e95cc91/019de0c9-898a-3af0-a4d8-7e030dd2108e.roa
File:                     019de0c9-898a-3af0-a4d8-7e030dd2108e.roa (raw, json)
Hash identifier:          /NXN7hJ6AQfipOlmuBmfPwfs/N2roM/Z8lQHu35I/6Y=
Subject key identifier:   A8:4C:3A:70:DD:EE:4F:6E:21:7F:D0:D1:0B:89:AB:DD:AD:74:92:5F
Certificate issuer:       /CN=750854da-6a6d-4f9f-a9f0-b7000e95cc91
Certificate serial:       010D0C9F4328584569885802B34E80C125B85640
Authority key identifier: 7F:C4:FA:69:BC:F6:B3:38:57:46:2A:07:83:94:A8:3C:EC:40:80:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750854da-6a6d-4f9f-a9f0-b7000e95cc91.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750854da-6a6d-4f9f-a9f0-b7000e95cc91/019de0c9-898a-3af0-a4d8-7e030dd2108e.roa
Signing time:             Tue 02 Apr 2024 13:00:37 +0000
ROA not before:           Tue 02 Apr 2024 13:00:37 +0000
ROA not after:            Mon 01 Jul 2024 13:00:37 +0000
asID:                     16509
IP address blocks:        69.2.101.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750854da-6a6d-4f9f-a9f0-b7000e95cc91/750854da-6a6d-4f9f-a9f0-b7000e95cc91.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750854da-6a6d-4f9f-a9f0-b7000e95cc91/750854da-6a6d-4f9f-a9f0-b7000e95cc91.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750854da-6a6d-4f9f-a9f0-b7000e95cc91.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:69:88:58:02:b3:4e:80:c1:25:b8:56:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=750854da-6a6d-4f9f-a9f0-b7000e95cc91
        Validity
            Not Before: Apr  2 13:00:37 2024 GMT
            Not After : Jul  1 13:00:37 2024 GMT
        Subject: CN=4232e746-83ef-452c-8bc0-bc31c980acbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:33:77:bd:f6:5b:be:34:4e:f8:42:75:32:ef:
                    b8:0c:1a:5e:50:6f:17:31:1f:4f:95:c1:04:36:48:
                    07:3c:9f:0a:82:15:51:d8:ce:33:70:1a:94:9b:cb:
                    2a:d4:d4:e4:4a:65:3a:d7:18:5e:52:91:10:8b:d8:
                    e6:8a:9b:e8:13:e8:5e:67:bb:be:2f:a0:72:3d:b9:
                    d3:61:8f:83:e9:e7:46:7a:7c:ae:4e:16:28:96:e2:
                    09:15:68:2b:ec:e4:81:1d:82:e9:da:fd:69:da:01:
                    14:3c:ff:cd:6b:0d:01:a6:68:49:31:1c:59:49:9a:
                    7e:e4:3c:57:b1:8e:53:6e:ec:fb:83:10:df:a2:40:
                    44:41:3c:e7:a3:f9:32:90:f4:c4:4a:8d:51:91:03:
                    89:50:d1:6d:74:86:75:9a:bf:60:df:fb:7c:40:e5:
                    34:5d:eb:ad:5c:41:f8:55:05:32:48:f3:11:3d:7c:
                    7a:24:78:a4:05:f7:90:66:23:5e:d6:37:c3:8d:07:
                    2b:45:a5:a8:b1:a9:c2:fe:8e:bd:2a:79:46:2a:c1:
                    0b:3f:fb:c6:0a:bb:db:55:91:f2:d0:72:89:b4:8c:
                    03:bb:18:94:b4:d0:6c:8c:76:14:f7:33:2a:3e:52:
                    d2:13:8c:20:74:d0:b7:7b:40:23:f7:63:f0:38:e6:
                    93:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:4C:3A:70:DD:EE:4F:6E:21:7F:D0:D1:0B:89:AB:DD:AD:74:92:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750854da-6a6d-4f9f-a9f0-b7000e95cc91/019de0c9-898a-3af0-a4d8-7e030dd2108e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750854da-6a6d-4f9f-a9f0-b7000e95cc91/750854da-6a6d-4f9f-a9f0-b7000e95cc91.crl

            X509v3 Authority Key Identifier:
                keyid:7F:C4:FA:69:BC:F6:B3:38:57:46:2A:07:83:94:A8:3C:EC:40:80:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750854da-6a6d-4f9f-a9f0-b7000e95cc91.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.2.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:67:ce:1c:93:e7:8f:f3:b1:06:84:de:4e:8f:c0:42:31:bc:
         22:61:0f:73:b7:db:35:6f:bd:91:f0:60:1c:07:b9:de:b0:7c:
         2e:15:16:55:47:98:c8:04:bc:2d:3b:9c:6d:3f:92:19:fc:92:
         be:ec:3c:5d:7f:78:58:c9:c3:ce:80:47:c1:63:a9:f3:31:87:
         f6:16:e0:f9:ab:f5:b1:d7:9c:9f:c0:ab:02:cf:8d:86:82:9f:
         a5:b8:20:42:f3:d5:44:26:c0:f6:ab:31:71:9c:dc:66:30:57:
         a6:fe:ee:3e:25:10:bb:70:f5:54:77:a2:db:99:cb:68:68:e0:
         74:26:b9:7d:18:88:d2:05:4c:75:a1:a5:13:ef:07:63:44:ca:
         cc:cf:2c:84:2a:a4:c6:7e:fb:aa:4b:20:28:2a:bb:80:94:a3:
         7e:3c:21:ea:28:b6:1c:e1:5a:02:8a:a9:d1:03:85:8f:06:72:
         f7:ad:ab:14:01:35:e0:1f:87:18:29:a3:33:77:6f:ce:25:2a:
         50:b7:a2:07:51:1c:e3:14:64:6a:40:e8:d8:81:5f:32:dd:31:
         ec:ec:25:84:25:18:c0:35:53:b2:5c:08:d0:5e:4e:0e:21:19:
         b8:28:3d:fb:0c:aa:d9:97:f1:8f:22:44:d6:34:6d:4c:68:9d:
         67:e8:9f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:59:56 2024 by rpki-client on console-fra.rpki-client.org